Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update identifier #37

Merged
merged 1 commit into from
Apr 25, 2016
Merged

update identifier #37

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions lockdown/inspec/os_spec.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
# author: Dominik Richter
# author: Patrick Muench

control '01' do
control 'os-01' do
impact 1.0
title 'Trusted hosts login'
desc "Rhosts/hosts.equiv files are a weak implemenation of authentication. Disabling the .rhosts and hosts.equiv support helps to prevent users from subverting the system's normal access control mechanisms of the system."
Expand All @@ -30,7 +30,7 @@
end
end

control '02' do
control 'os-02' do
impact 1.0
title 'Check owner and permissions for /etc/shadow'
desc 'Check periodically the owner and permissions for /etc/shadow'
Expand All @@ -47,7 +47,7 @@
end
end

control '03' do
control 'os-03' do
impact 1.0
title 'Check owner and permissions for /etc/passwd'
desc 'Check periodically the owner and permissions for /etc/passwd'
Expand All @@ -66,7 +66,7 @@
end
end

control '04' do
control 'os-04' do
impact 1.0
title 'Dot in PATH variable'
desc 'Do not include the current working directory in PATH variable. This makes it easier for an attacker to gain extensive rigths by executing a Trojan program'
Expand All @@ -76,7 +76,7 @@
end
end

control '05' do
control 'os-05' do
impact 1.0
title 'Check login.defs'
desc 'Check owner and permissions for login.defs. Also check the configured PATH variable and umask in login.defs'
Expand Down Expand Up @@ -110,7 +110,7 @@
end
end

control '06' do
control 'os-06' do
impact 1.0
title 'Check for SUID/ SGID blacklist'
desc 'Find blacklisted SUID and SGID files to ensure that no rogue SUID and SGID files have been introduced into the system'
Expand Down Expand Up @@ -151,7 +151,7 @@
end
end

control '07' do
control 'os-07' do
impact 1.0
title 'Unique uid and gid'
desc 'Check for unique uids gids'
Expand Down
10 changes: 5 additions & 5 deletions lockdown/inspec/package_spec.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
# author: Dominik Richter
# author: Patrick Muench

control '01' do
control 'package-01' do
impact 1.0
title 'Do not run deprecated inetd or xinetd'
desc 'http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.1'
Expand All @@ -30,7 +30,7 @@
end
end

control '02' do
control 'package-02' do
impact 1.0
title 'Do not install Telnet server'
desc 'Telnet protocol uses unencrypted communication, that means the passowrd and other sensitive data are unencrypted. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.2'
Expand All @@ -39,7 +39,7 @@
end
end

control '03' do
control 'package-03' do
impact 1.0
title 'Do not install rsh server'
desc 'The r-commands suffers same problem as telnet. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.3'
Expand All @@ -48,7 +48,7 @@
end
end

control '05' do
control 'package-05' do
impact 1.0
title 'Do not install ypserv server (NIS)'
desc 'Network Information Service (NIS) has some security design weaknesses like inadequate protection of important authentication information. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.4'
Expand All @@ -57,7 +57,7 @@
end
end

control '06' do
control 'package-06' do
impact 1.0
title 'Do not install tftp server'
desc 'tftp-server provides little security http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.5'
Expand Down
Loading